瑞星卡卡安全论坛

最近，我公司有许多台电脑都出现了鼠标不定时自动飘移现象，不知是否中了病毒？请高人指点。谢谢！！！

可能........
扫个日志上来看看吧~!
SREng
http://www.kztechs.com/

病毒名称    处理结果    发现日期    扫描方式    路径    文件    病毒来源
Hack.PswCracker    删除成功    2006-08-03 00:34    快捷扫描    D:\HY        本机
Trojan.ZhongSou.l    删除成功    2006-10-01 09:41    手动扫描    C:\WINDOWS\Downloaded Program Files    qfi85c.dll    本机
Trojan.DL.Agent.apg    删除成功    2006-10-01 09:41    手动扫描    C:\WINDOWS\Downloaded Program Files    sfg.dll>>PECompact2.x    本机
Trojan.Clicker.Agent.acw    删除成功    2006-10-01 09:52    手动扫描    C:\Program Files\Common Files\Lightning    1584.exe>>NetCount.exe    本机
Trojan.DL.Edodo.a    删除成功    2006-10-01 09:52    手动扫描    C:\Program Files\Common Files\Lightning    1584.exe>>ehuupdate.exe    本机

感谢你在百忙之中给我指点，现急盼你回复。谢！

买一个新鼠标 按上试一试  也许你的鼠标  不行了 嘎嘎

光电鼠标就有这个毛病
不过也不排除病毒原因,扫日志上来

跟鼠标无关，许多台电脑都是这样，而且不是用同一种鼠标，也不是光电鼠标。我怀疑可能是病毒所致。但用杀毒软件杀又杀不到有。救命呀！

在下是新手，是这个日志吗？----：
病毒名称处理结果发现日期扫描方式路径文件病毒来源
Hack.PswCracker删除成功2006-08-03 00:34快捷扫描D:\HY本机
Trojan.ZhongSou.l删除成功2006-10-01 09:41手动扫描C:\WINDOWS\Downloaded Program Filesqfi85c.dll本机
Trojan.DL.Agent.apg删除成功2006-10-01 09:41手动扫描C:\WINDOWS\Downloaded Program Filessfg.dll>>PECompact2.x本机
Trojan.Clicker.Agent.acw删除成功2006-10-01 09:52手动扫描C:\Program Files\Common Files\Lightning1584.exe>>NetCount.exe本机
Trojan.DL.Edodo.a删除成功2006-10-01 09:52手动扫描C:\Program Files\Common Files\Lightning1584.exe>>ehuupdate.exe本机

哦！是不是这个日志：
进程名称路径数值名称数值数据操作日期操作方式操作结果
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~ex1.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNPigUpdateC:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~ex1.exe2006-08-03 19:04修改同意修改
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~ex7.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSearchNet_Up"C:\Program Files\SearchNet\ServeUp.exe"2006-08-03 19:04修改同意修改
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~ex9.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNMoveSearchC:\Program Files\HuaCi\huaci\zsearch.exe2006-08-03 19:04修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEGrpConvgrpconv -o2006-08-03 19:05修改同意修改
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~ex1.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNPigUpdate2006-08-03 19:07删除同意修改
C:\Program Files\Internet Explorer\iexplore.exeHKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAINStart Pagehttp://www.qq.com/2006-08-05 23:06修改同意修改
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNICCOPYFILEC:\Program Files\UFDisk\UFDisk Format Tool\CopyFil2006-08-05 23:21修改同意修改
C:\Program Files\UFDisk\UFDisk Format Tool\CopyFile.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNICCOPYFILE2006-08-05 23:23删除同意修改
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNICCOPYFILEC:\\CopyFile.exe2006-08-05 23:28修改同意修改
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNICCOPYFILEC:\Program Files\UFDisk\UFDisk Format Tool\CopyFil2006-08-06 01:33修改同意修改
C:\Program Files\UFDisk\UFDisk Format Tool\CopyFile.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNICCOPYFILE2006-08-06 01:35删除同意修改
C:\优化大师\Womcc.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNstup.exe2006-08-08 22:28删除同意修改
C:\优化大师\Womcc.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSearchNet_Up2006-08-08 22:33删除同意修改
C:\优化大师\Womcc.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSearchNet_Up2006-08-08 22:33删除同意修改
C:\优化大师\Womcc.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNdmcd2006-08-08 22:33删除同意修改
C:\优化大师\Womcc.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNdudu2006-08-08 22:33删除同意修改
C:\优化大师\Womcc.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNnc3a2006-08-08 22:33删除同意修改
C:\优化大师\Womcc.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSearchNet_Up2006-08-08 22:34删除同意修改
C:\优化大师\Womcc.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSearchNet_Up2006-08-08 22:37删除同意修改
C:\WINDOWS\Explorer.EXEHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNstup.exeC:\PROGRA~1\TENCENT\Adplus\stup.exe2006-08-08 23:04修改同意修改
C:\Program Files\Internet Explorer\iexplore.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEBaiduInstallC:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\BaiDu2006-08-12 23:35修改同意修改
C:\Program Files\SearchNet\Setup.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSearchNet_Up2006-09-06 20:41删除同意修改
C:\Program Files\SearchNet\Setup.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSrvNet322006-09-06 20:41删除同意修改
C:\Program Files\SearchNet\Setup.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNnc3a2006-09-06 20:41删除同意修改
C:\PROGRA~1\TENCENT\Adplus\stup.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNstup.exe2006-09-14 20:27删除同意修改
C:\PROGRA~1\Internet Explorer\iexplore.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEBaiduInstallC:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\baidu2006-09-14 20:28修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEGrpConvgrpconv -o2006-09-14 20:28修改同意修改
C:\WINDOWS\Downlo~1\SearchNet\UnInstall.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSearchNet_Up2006-09-14 20:29删除同意修改
C:\WINDOWS\Downlo~1\SearchNet\UnInstall.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSrvNet322006-09-14 20:29删除同意修改
C:\WINDOWS\Downlo~1\SearchNet\UnInstall.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNnc3a2006-09-14 20:29删除同意修改
D:\恶意文件清理\RogueCleaner\RogueCleaner.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNCnsMin2006-09-15 00:40删除同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNBigDogPathC:\WINDOWS\VM_STI.EXE USB PC Camera 301P2006-09-17 21:19修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEMSPCLOCKrundll32.exe streamci,StreamingDeviceSetup {97ebaa2006-09-17 21:19修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEMSPQMrundll32.exe streamci,StreamingDeviceSetup {DDF4352006-09-17 21:19修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEMSKSSRVrundll32.exe streamci,StreamingDeviceSetup {96E0802006-09-17 21:19修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCECCDECODE0rundll32.exe streamci,StreamingDeviceSetup {5623702006-09-17 21:19修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEnabtsfec0rundll32.exe streamci,StreamingDeviceSetup {07DAD62006-09-17 21:19修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEWSTCODEC0rundll32.exe streamci,StreamingDeviceSetup {70BC062006-09-17 21:19修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCESLIP0rundll32.exe streamci,StreamingDeviceSetup {03884C2006-09-17 21:19修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCESTREAMIP0rundll32.exe streamci,StreamingDeviceSetup {D84D442006-09-17 21:19修改同意修改
C:\WINDOWS\system32\rundll32.exeHKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCENDISIP0rundll32.exe streamci,StreamingDeviceSetup {4892642006-09-17 21:19修改同意修改